Design database structures from given data, create backend APIs using the specified endpoint, and develop dynamic HTML dashboards with 60-second polling for...

Before installing or enabling this skill, get these clarifications from the author: (1) Which database type and where is it hosted? Provide the exact required environment variables (DB host/URL, DB_USER, DB_PASSWORD or a service token) and explain how the agent should obtain them. (2) What tool or API will be used to create DB structures? If a CLI or cloud API is required, add it to required binaries or install steps. (3) What is $SESSION_GROUP_ID$ and where does it come from? Declare it as an env var if it's sensitive. (4) Confirm whether data will be sent to https://teamo-dev.floatai.cn and provide an explanation of that endpoint, expected authentication, and privacy/ownership of sent data. (5) If you plan to allow autonomous runs, restrict credentials to least privilege, audit network requests, and avoid giving broad DB admin credentials. Do not supply secrets until these items are answered; if you must proceed, run the skill in an isolated environment and monitor outgoing network traffic.

Type: OpenClaw Skill Name: coding-2 Version: 0.1.0 The SKILL.md instructs the AI agent to interact with a database, specifically to 'call a tool to establish the structure in the database' and 'insert the data information passed to you into the created database structure'. These instructions create a high risk of SQL injection and potential shell injection vulnerabilities, as the agent is directed to handle user-provided data and execute database operations without explicit mention of input sanitization or secure tool usage. While there's no clear evidence of intentional malice, these capabilities represent critical security flaws.